This article explains how to protect your UserWay account with Multi-Factor Authentication or Two-Factor Authentication, referred to throughout this article as MFA/2FA.

You can enable MFA/2FA using your registered e-mail address or an authenticator app. Account owners can also require team members to use MFA/2FA.

Before You Begin

Make sure you can access the e-mail address registered to your UserWay account.To use an authenticator app, install a compatible app on your mobile device.

Examples include Google Authenticator, Microsoft Authenticator, and Authy.

⚠️ Important: If you plan to change the account owner or update the account owner’s e-mail address, turn off all enabled MFA/2FA methods before making the change.

MFA/2FA remain associated with the current owner’s e-mail address or authenticator device. After the change, the new owner should enable MFA/2FA using their own e-mail address or device.

Enable MFA/2FA With E-mail

Sign in to your UserWay Dashboard at https://manage.userway.org/.
Click your profile icon in the upper-right corner, then click My Account.
Open the tab Enable 2FA via email, then turn on nable 2FA via email button.
Open the verification message sent to your registered e-mail address.
Copy the verification code from the e-mail and enter it on the MFA/2FA setup page, Click Next.
Confirm that e-mail authentication is enabled.

Expected Result

MFA/2FA with e-mail is enabled. When additional verification is required during sign-in, UserWay sends a one-time code to your registered e-mail address.

💡 Tip: If the verification e-mail does not arrive, check your spam or junk folder before requesting another code.

MFA/2FA With an Authenticator App

Sign in to your UserWay Dashboard at https://manage.userway.org/.
Click your profile icon in the upper-right corner, then click My Account.
Open the Enable virtual device authentication tab, then turn on Enable virtual device authentication button.
Open your authenticator app (such as Google Authenticator or Microsoft Authenticator) and scan the QR code displayed on the setup page. Enter the six-digit verification code generated by the app, then provide a Device Name (this can be any name you choose to help identify the device). Once completed, click Next.
Save the one-time backup codes in a secure location, Click Close to complete the setup.

Expected Result

MFA/2FA with an authenticator app is enabled. When additional verification is required during sign-in, enter the current code generated by your authenticator app.

Enforce MFA/2FA for All Team Members

Account owners can use the account-level MFA/2FA setting to require team members to use additional authentication when signing in.

Sign in to your UserWay Dashboard at https://manage.userway.org/.
Click your profile icon in the upper-right corner, then open Team Management.
Locate the account-level MFA/2FA enforcement setting, Turn on the setting to enforce MFA/2FA for team members.
Confirm the change if prompted.